What’s Vulnerable › Vulnerabilities

CVE-2014-2311

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-03-11 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 before 2.2.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Modx Revolution: 2.0.0, 2.0.1, 2.0.3, 2.0.4, 2.0.5, 2.0.6 (+21)

References

• http://forums.modx.com/thread/89486/modx-revolution-2-x-sql-injection
• http://modx.com/blog/2014/03/07/revolution-2.2.13/
• http://www.openwall.com/lists/oss-security/2014/03/09/3
• http://forums.modx.com/thread/89486/modx-revolution-2-x-sql-injection
• http://modx.com/blog/2014/03/07/revolution-2.2.13/
• http://www.openwall.com/lists/oss-security/2014/03/09/3

Get alerted when CVE-2014-2311 or the next vulnerability affects your stack